What we collect, and why.

We use Vercel Analytics and Vercel Speed Insights to understand which pages get read and how quickly they load. Neither uses cookies. Neither builds a profile across sites. Both work with a per-day identifier derived from your IP that Vercel discards after 24 hours.

We do not run Google Analytics, Meta pixels, or any ad-tech trackers. There is no cross-site fingerprint of you here.

Surveys are anonymous by default. You can share an email at the end only if you check the box that says it’s okay to contact you. Petition signatures do collect your name, email, and phone so we can verify who signed and reach out if we need to; only your name (or initials, if you pick private) is visible on the public page.

We hash your IP address before it touches our database so we can slow down spam without holding onto raw IPs. Only two admins, Nuha and Taimoor, can see the underlying data.

If you sign up for the newsletter, we store your email and the source page you came from. We use it only to send occasional updates. Reply to any email to unsubscribe and we will remove you.

Payments are processed by Stripe. We store the amount, currency, and a Stripe reference so we can reconcile our records. We store your name and email if you provide them, so we can send you a receipt. The Salaam Project is not a registered charity, so receipts cannot be used for tax purposes.

We do not store your card details. Those live only with Stripe.

Only Nuha and Taimoor have admin access. Sensitive actions like revealing a signer’s contact or exporting a CSV are recorded in an internal audit log. We use that log to keep each other honest, not to track anyone else.

Questions, corrections, or requests to remove your data: email us and we’ll respond within 48 hours on weekdays.